Lucene search
+L

4 matches found

NVD
NVD
•added 2025/01/09 9:15 p.m.•37 views

CVE-2024-13296

Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1...

6.6CVSS0.00407EPSS
SaveExploits0References1
OSV
OSV
•added 2025/01/09 8:19 p.m.•15 views

CVE-2024-13296 Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062

Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1...

6.6CVSS6.6AI score
SaveExploits0References5
CVE
CVE
•added 2025/01/09 8:19 p.m.•81 views

CVE-2024-13296

The Drupal Mailjet module (versions 0.0.0 through 4.0.0 ) is vulnerable to Remote Code Execution (RCE) due to a deserialization of untrusted data flaw. Specifically, the module fails to securely pass data to PHP's unserialize() function, which can lead to PHP Object Injection . While exploitation...

7.2AI score0.00407EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/01/09 8:19 p.m.•41 views

CVE-2024-13296 Mailjet - Moderately critical - Arbitrary PHP code execution - SA-CONTRIB-2024-062

Deserialization of Untrusted Data vulnerability in Drupal Mailjet allows Object Injection.This issue affects Mailjet: from 0.0.0 before 4.0.1...

0.00407EPSS
SaveExploits0References1
Rows per page
Query Builder